Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\yoyoddos ] 'Start' = '00000002'
- <SYSTEM32>\yoyoddos.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\yoyoddos.exe
- %TEMP%\Temp\360sdrun.exe
- %TEMP%\Temp\YD_Server.exe
- %TEMP%\Temp\YD_Server.exe
- 'xi#####77244.3322.org':2009
- DNS ASK xi#####77244.3322.org